Privacy & Cookie Policy

This policy explains what personal data is processed when you visit villamillerisantos.com (the “site”), why, and what rights you have under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable national law.

Data controller

Elvio Milleri, owner of Villa Milleri Santos, Perugia (Italy). Email: elvio.milleri@villamillerisantos.com

What data we process

Browsing data. Like any website, the server that hosts the site automatically records technical data for each request: IP address, date and time, page requested, browser and operating system. This data is used only to deliver the site and keep it secure, and is kept for a limited period in the server logs. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Data you send us. The site has no forms. If you contact us by email or phone, we use your details and the content of your message only to reply and, where relevant, to discuss the purchase of the property. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)). We keep this correspondence for as long as needed for the enquiry and any resulting negotiation, then delete it unless the law requires us to keep it.

Analytics data (only with your consent). If you allow the “Analytics” category, the site uses Google Analytics 4 to produce aggregated statistics about visits: pages viewed, time on page, device and browser type, approximate location (city level) and how you arrived at the site. Google Analytics 4 does not log or store full IP addresses. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Cookies

Cookies are small text files stored by your browser. The site uses:

Cookie	Type	Provider	Duration	Purpose
vms_consent	Strictly necessary	This site	6 months	Stores your cookie choices
_ga	Analytics (consent)	Google	2 years	Distinguishes visitors
_ga_<ID>	Analytics (consent)	Google	2 years	Keeps the session state

Strictly necessary cookies do not require consent. Analytics cookies are only set after you accept them in the cookie banner; until then Google Analytics is not loaded. Fonts and all other files are served directly from our own server, so no other third party is contacted while you browse.

Changing your choice. You can accept or withdraw consent at any time through Cookie settings at the bottom of every page. Withdrawing consent deletes the analytics cookies. You can also block or delete cookies in your browser settings.

Recipients and transfers outside the EU

Data may be processed on our behalf by the provider that hosts the site and, if you consent to analytics, by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor (Google’s privacy policy). Google may transfer data to the United States; Google LLC is certified under the EU–US Data Privacy Framework, on which such transfers are based. We do not sell your data or use it for advertising.

Your rights

You have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability (Arts. 15–22 GDPR). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before. To exercise these rights, write to the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the alleged infringement took place — for example the Italian Garante per la protezione dei dati personali or the Danish Datatilsynet.

Changes to this policy

We may update this policy, for example if we add new services to the site. The date of the latest update is shown at the top of this page. If the change affects cookies that need your consent, the cookie banner will ask for your choice again.